CVE-2020-20092

ArticleCMS 1.0 is vulnerable to a file-upload flaw in the image-upload feature at /admin. By spoofing Content-Type: image/jpeg and appending PHP code after the JPEG data, a remote attacker could execute arbitrary PHP code. This claim is consistent across multiple connected records (e.g., Red Hat,...

CVE-2020-28063

CVE-2020-28063 is a file upload vulnerability in ArticleCMS affecting all versions. The connected sources describe an unrestricted file upload flaw with no uploading restrictions, enabling attackers to obtain a shell remotely. The issue is consistently characterized across multiple feeds (e.g., C...